Traffic Trace Info
DumpFile: 201102051400.dump
FileSize: 2339.19MB
Id: 201102051400
StartTime: Sat Feb 5 14:00:00 2011
EndTime: Sat Feb 5 14:15:00 2011
TotalTime: 899.60 seconds
TotalCapSize: 1833.56MB CapLen: 96 bytes
# of packets: 33136207 (25949.06MB)
AvgRate: 241.97Mbps stddev:56.59M
IP flow (unique src/dst pair) Information
# of flows: 788621 (avg. 42.02 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 1.7% 1.2% 1.1% 1.1% 1.1% 1.0% 1.0% 0.9% 0.7%
IP address Information
# of IPv4 addresses: 434053
Top 10 bandwidth usage (bytes/total in %):
28.7% 4.7% 4.4% 4.2% 4.1% 2.9% 2.8% 2.6% 2.5% 2.4%
# of IPv6 addresses: 3248
Top 10 bandwidth usage (bytes/total in %):
43.3% 40.4% 20.5% 20.5% 8.5% 8.4% 3.5% 3.0% 2.0% 1.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201102051400.pktlen.png)
detailed numbers
[ 32- 63]: 6460400
[ 64- 127]: 6838599
[ 128- 255]: 1094405
[ 256- 511]: 852637
[ 512- 1023]: 743528
[ 1024- 2047]: 17146638
Protocol Breakdown
![[protocol breakdown chart]](201102051400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33136207 (100.00%) 27209561692 (100.00%) 821.14
ip 32994524 ( 99.57%) 27139695001 ( 99.74%) 822.55
tcp 27659467 ( 83.47%) 24824052206 ( 91.23%) 897.49
http(s) 15121047 ( 45.63%) 20866366155 ( 76.69%) 1379.96
http(c) 7224918 ( 21.80%) 1299790534 ( 4.78%) 179.90
squid 147014 ( 0.44%) 38873021 ( 0.14%) 264.42
smtp 199202 ( 0.60%) 96752560 ( 0.36%) 485.70
ftp 52414 ( 0.16%) 5135809 ( 0.02%) 97.99
pop3 9400 ( 0.03%) 3197949 ( 0.01%) 340.21
imap 6206 ( 0.02%) 1839609 ( 0.01%) 296.42
telnet 561 ( 0.00%) 79786 ( 0.00%) 142.22
ssh 60274 ( 0.18%) 9898713 ( 0.04%) 164.23
dns 18386 ( 0.06%) 1279233 ( 0.00%) 69.58
bgp 581 ( 0.00%) 99497 ( 0.00%) 171.25
napster 50 ( 0.00%) 3978 ( 0.00%) 79.56
realaud 73 ( 0.00%) 4911 ( 0.00%) 67.27
rtsp 13825 ( 0.04%) 15516838 ( 0.06%) 1122.38
icecast 1907 ( 0.01%) 140852 ( 0.00%) 73.86
hotline 8 ( 0.00%) 538 ( 0.00%) 67.25
other 4803601 ( 14.50%) 2485072223 ( 9.13%) 517.34
udp 4094432 ( 12.36%) 1899917534 ( 6.98%) 464.02
dns 706275 ( 2.13%) 103251849 ( 0.38%) 146.19
realaud 19 ( 0.00%) 2685 ( 0.00%) 141.32
halflif 20 ( 0.00%) 2392 ( 0.00%) 119.60
starcra 17903 ( 0.05%) 1202505 ( 0.00%) 67.17
everque 565 ( 0.00%) 74790 ( 0.00%) 132.37
unreal 183 ( 0.00%) 29968 ( 0.00%) 163.76
quake 28 ( 0.00%) 3240 ( 0.00%) 115.71
cuseeme 17 ( 0.00%) 5534 ( 0.00%) 325.53
other 3369195 ( 10.17%) 1795293398 ( 6.60%) 532.86
icmp 522508 ( 1.58%) 93130205 ( 0.34%) 178.24
ipip 180 ( 0.00%) 18780 ( 0.00%) 104.33
ipsec 1048 ( 0.00%) 324368 ( 0.00%) 309.51
ip6 695870 ( 2.10%) 318240151 ( 1.17%) 457.33
other 21019 ( 0.06%) 4011757 ( 0.01%) 190.86
frag 1241 ( 0.00%) 1043990 ( 0.00%) 841.25
ip6 141683 ( 0.43%) 69866691 ( 0.26%) 493.12
tcp6 94006 ( 0.28%) 57885380 ( 0.21%) 615.76
http(s) 10331 ( 0.03%) 7489444 ( 0.03%) 724.95
http(c) 28685 ( 0.09%) 2525772 ( 0.01%) 88.05
smtp 45 ( 0.00%) 14027 ( 0.00%) 311.71
ftp 37 ( 0.00%) 3327 ( 0.00%) 89.92
ssh 84 ( 0.00%) 16408 ( 0.00%) 195.33
dns 546 ( 0.00%) 143432 ( 0.00%) 262.70
bgp 91 ( 0.00%) 19998 ( 0.00%) 219.76
other 54187 ( 0.16%) 47672972 ( 0.18%) 879.79
udp6 33225 ( 0.10%) 10143917 ( 0.04%) 305.31
dns 31784 ( 0.10%) 9920227 ( 0.04%) 312.11
quake 1 ( 0.00%) 94 ( 0.00%) 94.00
other 1440 ( 0.00%) 223596 ( 0.00%) 155.28
icmp6 13981 ( 0.04%) 1537293 ( 0.01%) 109.96
ip6 81 ( 0.00%) 11058 ( 0.00%) 136.52
pim6 46 ( 0.00%) 5616 ( 0.00%) 122.09
other6 344 ( 0.00%) 283427 ( 0.00%) 823.92
tcpdump file: 201102051400.dump.gz (781.05 MB)